skills.rest
Prohao42
Prohao42COMMUNITY
Explore all skills by this author →
GitHub

ssti-server-side-template-injection

Detect server-side template injection vulnerabilities using polyglot probes and engine fingerprinting.

120|8|Updated Jun 2, 2026
Search Tags:#exploitation#vulnerability detection#RCE#server-side template injection#SSTI
One-click install
npx skills add https://github.com/Prohao42/aimy-skill --skill ssti-server-side-template-injection-prohao42
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ssti-server-side-template-injection
Source: https://github.com/Prohao42/aimy-skill/tree/main/ai-mian/hack-skills/skills/ssti-server-side-template-injection
Command: npx skills add https://github.com/Prohao42/aimy-skill --skill ssti-server-side-template-injection-prohao42

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jinja2, freezegun, requests, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and leverages server-side template injection vulnerabilities, allowing for the detection and exploitation of such security flaws.

Core Features & Use Cases

  • Detection: Offers polyglot probes and engine fingerprinting for SSTI detection.
  • Exploitation: Provides RCE chains for Jinja2, FreeMarker, Twig, ERB, and other engines.
  • Bypass Techniques: Incluces sandbox bypass methods for engines like Jinja2 and Twig.
  • Blind SSTI: Techniques for blind SSTI detection, including timing-based, DNS-based, and error-based methods.
  • Flask PIN Calculation: Calculates Flask PIN for debugging mode access.

Quick Start

Load the skill and use the polyglot probe sequence to detect SSTI in a target application.

Frequently Asked Questions about ssti-server-side-template-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect server-side template injection vulnerabilities in web applications?▼

Detect server-side template injection by using polyglot detection probes to identify SSTI vulnerabilities, followed by engine fingerprinting to determine the specific templating engine. This Skill provides automated probe sequences to test target applications for injection points.

Can I achieve remote code execution through Jinja2 or Twig sandbox bypass?▼

Achieve remote code execution through Jinja2 and Twig sandbox bypass methods included in the Skill. It provides RCE chains for multiple engines including Jinja2, FreeMarker, Twig, and ERB to execute commands after confirming SSTI.

What is the best way to perform blind SSTI detection when output is not reflected?▼

Perform blind SSTI detection using timing-based, DNS-based, and error-based methods provided by the Skill. These techniques identify vulnerabilities in applications that do not directly reflect template injection output in responses.

Does this SSTI exploitation approach support multiple languages like PHP, Java, and Node.js?▼

Supports SSTI exploitation across Python, PHP, Java, Ruby, and Node.js templating engines. The Skill includes specific RCE chains and fingerprinting logic for diverse web application frameworks and their respective template engines.

How do I calculate Flask PIN for debugging mode access after SSTI exploitation?▼

Calculate Flask PIN for debugging mode access using the Skill's built-in Flask PIN calculation functionality. This allows you to leverage SSTI vulnerabilities to access the Flask debugger and achieve deeper application compromise.

Related Skills

Explore More Software Engineering Skills→
cmndcntrlcybercmndcntrlcyber
3

hunt-http-smuggling

Detect HTTP request smuggling vulnerabilities by analyzing header parsing inconsistencies.

Community
Advanced
AcczdyAcczdy
2

conducting-internal-network-penetration-test

Simulate internal network penetration tests to reveal lateral movement and privilege escalation paths.

Community
Advanced
usk6666usk6666
11

yorishiro-proxy

Intercept, replay, and fuzz HTTP/S traffic via a Model Context Protocol interface.

Community
Advanced
uphiagouphiago
1.1k

hunt-springboot

Detect Spring Boot-specific vulnerabilities including Actuator endpoints, SpEL injection, and Spring4Shell.

Community
Intermediate